Snake Oilers: Grey Noise! Merge Base! Votiro!

Summary: In this sponsored Risky Business podcast segment, GreyNoise founder Andrew Morris described how his company runs passive collector sensors in hundreds of data centers to identify internet-wide scan, crawl and attack traffic so SOC teams can deprioritize those alerts. MergeBase and Votiro also presented, with MergeBase offering software composition analysis plus an in-production dynamic SCA product feeding Java app telemetry to security teams, and Votiro updating its CDR product for macro-based threats.
What you should know: Morris argues SOC teams cannot triage every alert generated by opportunistic scanning, and that building a reliable benign-scanner list is hard enough to sustain an entire business - a gap he says IDS vendors do not close themselves.

Read the original at GreyNoise Blog ↗